Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: SG2aw+bwholXB4ol5GJ4pM7hyIQNek4qA/lGVNFOd4Q=
Subject key identifier: 68:99:20:89:E1:7F:A6:95:B6:47:DA:48:24:A5:59:DB:E8:F6:72:F5
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 019A01B5D04BB5341E2306F2A00220279565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:01:23 +0000
Manifest this update: Mon 20 Oct 2025 13:01:23 +0000
Manifest next update: Tue 21 Oct 2025 13:01:23 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: h7OrCWLxAXMSLusxIVSuKHkn5N9ZtXhZjSK42rY85nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:d0:4b:b5:34:1e:23:06:f2:a0:02:20:27:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Oct 20 13:01:23 2025 GMT
Not After : Oct 21 13:01:23 2025 GMT
Subject: CN=68992089e17fa695b647da4824a559dbe8f672f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:b3:e4:57:0f:e4:a9:47:a9:71:ee:6a:95:
70:b0:09:9f:84:bf:aa:b3:91:6b:6c:9b:13:4c:36:
a7:56:01:16:a7:e0:7c:55:d9:3f:b7:ee:82:ec:49:
78:bf:a0:41:a3:1b:4d:a7:5b:98:84:69:f7:90:b2:
53:dc:46:d4:52:92:b5:a7:fc:99:fd:2a:dd:bf:d2:
3f:68:5c:04:13:1f:88:af:e7:f4:01:69:e0:6b:b5:
b5:4c:82:12:23:8d:c1:c2:ba:38:e2:ff:58:1d:53:
b6:e4:3a:22:80:3a:f4:46:73:d3:b9:78:1e:04:0d:
91:d5:13:65:19:a6:03:90:4f:96:2e:a6:33:83:fa:
aa:4a:28:67:6d:29:3c:1a:ee:a2:0a:ef:1f:2b:91:
f2:a5:e4:8a:4e:47:27:b0:df:6b:d8:74:32:18:61:
09:1a:48:eb:1a:b9:8c:c7:15:5e:3d:f3:ce:f8:71:
98:3c:60:7a:07:3f:67:2e:2c:15:15:87:8d:9a:f3:
a9:62:59:bb:f6:d8:32:b7:94:54:3e:12:b2:b7:75:
3b:33:3f:1a:52:b4:f2:3b:36:86:d6:fd:dd:57:39:
89:65:8d:eb:bf:d8:18:c9:f3:33:d0:76:78:6d:46:
8c:8a:61:cb:b9:fe:31:08:a6:4b:78:99:f5:09:46:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:20:89:E1:7F:A6:95:B6:47:DA:48:24:A5:59:DB:E8:F6:72:F5
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:66:4e:87:47:1c:d9:d8:39:6d:59:96:30:08:9c:f0:ee:18:
6e:21:94:39:03:ff:fa:26:30:36:30:9c:c9:5c:17:1d:a0:e1:
d3:5c:f9:47:5b:12:f6:33:22:65:49:55:e9:3a:c6:78:08:e9:
05:35:d2:b3:39:c1:e5:4a:ee:bf:b0:0c:8b:d6:1c:c9:be:a6:
df:75:f3:0b:08:30:82:a2:41:b3:0a:1b:7a:31:e0:84:be:a0:
dc:21:88:f3:d3:61:83:96:64:32:f6:ea:25:bc:50:09:73:8e:
70:11:7b:e4:b8:ce:47:0e:c9:2c:5b:b9:95:29:ee:45:5d:c3:
ca:8e:fb:fb:4e:ea:f4:42:ba:83:ee:bf:ef:dc:3b:95:b1:5c:
e0:d5:62:c1:57:6e:f5:4d:36:4a:46:94:ae:44:0a:e7:cc:56:
11:64:64:ba:a8:0d:93:29:dc:ea:13:ce:c0:56:f0:73:5d:e9:
e8:15:54:48:d7:a7:00:dc:eb:cd:31:cf:7b:a0:ff:63:30:d2:
e5:26:8e:09:79:b1:8d:52:62:b7:e2:bc:fa:63:d7:6b:9c:4d:
77:7f:8a:fe:e6:ef:b7:e7:90:f1:e2:32:3a:58:2a:ea:f3:48:
e9:2b:90:75:23:e4:da:27:d6:03:5b:60:33:0f:ca:91:4b:66:
96:13:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:05 2025 by rpki-client